$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft File: 134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft (raw, json) Hash identifier: ixoe76ZfWbHDMSNTS2ul+YyAftyZDlccBNSPEmDqlT0= Subject key identifier: C9:19:A9:DC:98:08:FC:E9:69:5F:91:9F:6F:E5:5C:44:AC:3D:CD:A1 Authority key identifier: 13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E Certificate issuer: /CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E Certificate serial: 62211DEE041D2EB71E84FA7192C7FBFEEC3DAE7C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft Manifest number: 5A Signing time: Thu 26 Mar 2026 21:58:28 +0000 Manifest this update: Thu 26 Mar 2026 21:53:28 +0000 Manifest next update: Fri 27 Mar 2026 23:11:28 +0000 Files and hashes: 1: 134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl (hash: 2850HMPNziwXGUIYJWE8bPoZVmh5DIhTBiUzwSAy8Us=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:21:1d:ee:04:1d:2e:b7:1e:84:fa:71:92:c7:fb:fe:ec:3d:ae:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E Validity Not Before: Mar 26 21:53:28 2026 GMT Not After : Mar 27 23:11:28 2026 GMT Subject: CN=C919A9DC9808FCE9695F919F6FE55C44AC3DCDA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:fb:bb:97:a1:c6:f4:fd:5f:02:50:98:00:c8: a8:74:e7:1b:d8:88:74:8d:aa:a5:71:68:cd:90:a0: 8d:8c:cc:61:25:10:14:43:6c:56:ad:4a:73:cf:5d: 9a:d9:bd:f8:ba:92:52:2d:a4:2d:be:50:a3:34:6c: 81:a9:b0:5e:d7:87:54:bc:a1:54:d1:ae:08:3e:5e: dd:47:d7:82:5c:61:2f:ac:20:e4:b6:7f:99:d0:78: b0:96:a7:f0:3f:16:93:5c:36:73:52:27:7f:6e:22: 9a:c5:2e:2e:05:f6:38:eb:46:c1:bd:63:74:30:27: c6:27:fb:c5:52:b8:ab:af:e6:9f:68:07:9f:5d:62: 9b:8a:ea:e9:77:02:25:7a:fd:e8:98:74:72:32:55: d6:aa:48:33:87:14:89:67:17:08:6a:58:16:99:7c: 3f:a7:fe:44:e9:6f:7d:ce:97:bb:8f:cb:e4:92:f1: de:3c:2c:e2:e4:60:78:99:dc:c7:d6:32:df:72:cc: 69:7e:13:59:32:df:01:cd:e2:70:ed:84:37:9d:95: d3:72:57:8b:88:36:d3:02:9a:18:3c:13:15:7b:9c: 35:8e:94:4e:e4:ad:aa:b2:ea:ab:27:a0:e4:69:fd: 86:6e:65:aa:7f:4c:c5:a9:e4:41:fd:64:6d:53:a9: b0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:19:A9:DC:98:08:FC:E9:69:5F:91:9F:6F:E5:5C:44:AC:3D:CD:A1 X509v3 Authority Key Identifier: keyid:13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:bc:c7:36:d5:6d:19:09:eb:fa:de:4f:c3:0f:07:21:7c:7f: 00:53:eb:13:ff:f5:c8:6b:2b:b2:01:99:77:b4:fd:f6:35:92: 25:74:48:39:53:be:16:fa:60:c2:1a:3b:eb:30:29:64:68:d9: d9:64:30:d3:3b:be:da:bd:2b:53:b2:43:5d:2b:f0:f8:70:89: 0d:4c:5e:e4:2f:e8:fc:28:43:8c:20:8e:89:a3:f5:f1:e4:ac: a7:1f:a3:21:5b:81:d0:ec:8b:99:fa:7e:28:d7:23:af:c7:66: a8:8f:cc:31:0a:42:d5:c8:bb:28:c5:32:45:19:95:3b:df:3c: b6:3d:a1:0d:09:6a:bd:bc:02:26:16:41:f3:e5:6a:6f:e0:08: 40:8d:63:8b:a3:56:a5:32:2d:42:45:1d:97:6a:ad:1d:b6:9f: 1f:55:dc:6b:23:e3:4e:34:21:09:cf:a1:a9:fc:aa:a6:21:7e: 24:a0:28:2d:dd:14:2d:4b:42:2b:2d:8c:0b:65:fd:bf:d3:98: 34:f9:a6:bf:bd:68:84:bf:75:5c:50:39:5e:9e:08:32:24:98: 1f:cf:09:56:b8:2b:1f:40:f4:d3:97:11:84:21:fa:74:db:16: ef:f6:2a:c6:bd:dc:31:35:9b:f8:a8:88:00:85:4f:df:df:3c: 72:c5:e0:e4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYiEd7gQdLrcehPpxksf7/uw9rnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM0QUMzNjc0RDA1QzREREVCM0ZCRUU1RTk2QjkzRUE4 RDM3QzUxRTAeFw0yNjAzMjYyMTUzMjhaFw0yNjAzMjcyMzExMjhaMDMxMTAvBgNV BAMTKEM5MTlBOURDOTgwOEZDRTk2OTVGOTE5RjZGRTU1QzQ0QUMzRENEQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt+7uXocb0/V8CUJgAyKh05xvY iHSNqqVxaM2QoI2MzGElEBRDbFatSnPPXZrZvfi6klItpC2+UKM0bIGpsF7Xh1S8 oVTRrgg+Xt1H14JcYS+sIOS2f5nQeLCWp/A/FpNcNnNSJ39uIprFLi4F9jjrRsG9 Y3QwJ8Yn+8VSuKuv5p9oB59dYpuK6ul3AiV6/eiYdHIyVdaqSDOHFIlnFwhqWBaZ fD+n/kTpb33Ol7uPy+SS8d48LOLkYHiZ3MfWMt9yzGl+E1ky3wHN4nDthDedldNy V4uINtMCmhg8ExV7nDWOlE7kraqy6qsnoORp/YZuZap/TMWp5EH9ZG1TqbCdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyRmp3JgI/OlpX5Gfb+VcRKw9zaEwHwYDVR0j BBgwFoAUE0rDZ00FxN3rP77l6WuT6o03xR4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTM5NDE3OS8wLzEzNEFDMzY3NEQwNUM0RERFQjNGQkVFNUU5NkI5 M0VBOEQzN0M1MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTM0QUMzNjc0RDA1QzREREVCM0ZCRUU1RTk2QjkzRUE4RDM3QzUxRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjkzOTQxNzkvMC8xMzRBQzM2NzREMDVD NERERUIzRkJFRTVFOTZCOTNFQThEMzdDNTFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErzHNtVtGQnr +t5Pww8HIXx/AFPrE//1yGsrsgGZd7T99jWSJXRIOVO+Fvpgwho76zApZGjZ2WQw 0zu+2r0rU7JDXSvw+HCJDUxe5C/o/ChDjCCOiaP18eSspx+jIVuB0OyLmfp+KNcj r8dmqI/MMQpC1ci7KMUyRRmVO988tj2hDQlqvbwCJhZB8+Vqb+AIQI1ji6NWpTIt QkUdl2qtHbafH1XcayPjTjQhCc+hqfyqpiF+JKAoLd0ULUtCKy2MC2X9v9OYNPmm v71ohL91XFA5Xp4IMiSYH88JVrgrH0D005cRhCH6dNsW7/Yqxr3cMTWb+KiIAIVP 3988csXg5A== -----END CERTIFICATE-----Generated at Fri Mar 27 08:15:35 2026 by rpki-client